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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims: 
1-10. (Canceled) 

11. (Currently Amended) A method of controlling access to records stored in a 
database, said method comprising: 

identifying a password that is associated with one or more users of said 
database; 

defining a calculation expression for said identified password, wherein 
said calculation expression is a variable expression defined based on at least 
one field of data used in a plurality of records stored in said database^ and 
wherein said calculation expression can be evaluated at least partly based on 
said at least one field of data used in said plurality of records, wherein said at 
least one field of data is a variable which may have different values for each of 
said plurality of records, thereby allowing access to each individual record of 
various fie ld s of data stor e d in said plurality of records to be selectively controlled 
based on at least one value of said at least one field of data stored for each of 
said plurality of records of said database , and wherein said calculation 
expression defines access privileges of said one or more users with respect to at 
least one operation that may be requested to be performed by said one or more 
users on said plurality of records of said database; 

receiving a request to perform said at least one operation on said plurality 
of records of said database, said request being identified as a request made by 
said one or more users associated with said password; and 

evaluating said calculation expression for said each of said plurality of 
records, based on said at least one field of data, when said request has been 
received, wherein said evaluating comprises : (a) determining at least one value 
for said at least one field of data stored for a first record of said plurality of 
records, and ibi using said at least one value as input to said calculation 
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expression to evaluate said calculation expression for said first record , and (c^ 
determining a first result for said calculation expression based on sard evaluation 
of said calculation expression for said first record, wherein said first result 
effectively indicates whether to grant access to said first record. . paid evaluation 
returning on l y ono of two po s sib l e valu e s for each of sa i d p l urality of rooordo, ono 
of sa i d possible values i ndicating that said at l east on e operation shou l d be 
g r anted and another on e of said poccib l o values i nd i cating that sa i d ot l e ast ono 
operation should bo denied ? 

granting said at l e ast ono op e ration to be performed wh e n oaid evaluation 
return s-oB€ssaid possible valuo to indicat e that said ot l east ono operation should 
be granted; and 

donying said at least one op e ration to bo perform e d when said - e valuation 
r e turns ono card anotho r-pees ibl e valu e to indicate that oaid at least ono 
op e ration - should be d e ni e d, 

12. (Original) A method as recited in claim 11 , wherein said at least one 
operation can be a browse, an edit, or a delete operation. 

13. (Original) A method as recited in claim 1 1, wherein said calculation 
expression is not explicitly defined for said at least one operation but said 
calculation expression is one that has been defined for another operation which 
has been considered as a related operation to said at least one operation. 

14. (Previously Presented) A method as recited in claim 11, 

wherein said calculation expression can be evaluated at least partly based 
on at least one state variable of said database, wherein said state variable can 
indicate the condition of an element of said database at a particular time. 

15. (Original) A method as recited in claim 14, wherein said method further 
comprises: 

granting temporary or limited access to said at least one record to allow 
said evaluating of said calculation expression. 

16-37, (Canceled) 
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38. (Currently Amended) A computer readable medium including computer 
program code for controlling access to records stored in a database, said 
computer readable medium comprising; 

computer program code for identifying a password that is associated with 
one or more users of said database; 

computer program code for defining a calculation expression for said 
identified password, wherein said calculation expression is a variable expression 
defined based on at least one field of data used in a plurality of records stored in 
said database. aBd wherein said calculation expression can be evaluated at least 
partly based on said at least one field of data used in sard plurality of records, 
wherein said at least one field of data is a variable which may have different 
values for each of said plurality of records, thereby allowing s e lective l y control li ng 
access to each individual record of various fieldo of data stor e d in said plurality of 
records to be selectively controlled based on at least one value of said at least 
one field of data stored for each of said plurality of records of said database , and 
wherein said calculation expression defines access privileges of said one or 
more users with respect to at least one operation that may be requested to be 
performed by said one or more users on said plurality of records of said 
database; 

computer program code for receiving a request to perform said at least 
one operation on said plurality of records of said database, said request being 
identified as a request made by said one or more users associated with said 
password; and 

computer program code for evaluating said calculation expression for 
each of said plurality of records, based on at least one field of data, when said 
request has been reoeived, wherein said evaluating comprises : fa) determining 
at least one value for said at least one field of data stored for a first record of said 
plurality of records, a«4 £b} using said at least one value as input to said 
calculation expression to evaluate said calculation expression for said first 
record , and (c) determining a first result for said calculation expression based on 
said evaluation of said calculation expression for said first record, wherein said 
first result effectively indicates whether to grant access to said first record. ^&a44 
evaluation returning only ono of two poccibl e va l u e s - for eac h of said plurality of 
records, one of said poccible values i ndicating that said at loast ono operation 
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s h ould be granted and anoth e r ono of c aid possible values indicating that said at 
l e ast one operation s h ould b e denied; 

computer program code for granting caid at l east on e operation to b e 
p e rformod wh o n - oaid evaluation returns ono card poooiblo valu e to indicat e that 
said at lo ac t on e op e ration should bo granted; and 

computer program code for - d e nying said at l east on e operation to be 
performed wh e n said ovaluation returns on e sa i d ^ anoth e r pos s ible va l u e to 
in dicat e that said at l east one operation - should bo denied 

39. (Previously Presented) A computer readable medium as recited in claim 
38, wherein said at least one operation can be a browse, an edit, or a delete 
operation. 

40. (Previously Presented) A computer readable medium as recited in claim 
38, wherein said calculation expression Is not explicitly defined for said at least 
one operation but said calculation expression is one that has been defined for 
another operation which has been considered as a related operation to said at 
least one operation. 

41. (Previously Presented) A computer readable medium as recited in claim 
38, wherein said calculation expression can be evaluated at least partly based on 
at least one state variable of said database. 

42. (Previously Presented) A computer readable medium as recited in claim 
38, further comprising: 

computer program code for granting temporary or limited access to said at 
least one record to allow said evaluating of said calculation expression. 

43. (Currently Amended) A database systems system comprising!!;]]; 
a database including a plurality of records stored therein; 

a database program that can access said database and can be used as 
an interface to said database, wherein said database program includes a 
Graphical User Interface which can be used to: define a calculation expression 
for controlling access to said plurality records in said database, wherein said 
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calculation expression is a variable expression defined based on at least one 
field of data used in a plurality of records stored in said database.,, and wherein 
said calculation expression can be evaluated at least partly based on said at 
least one field, wherein said at least one field of data is a variable which may 
have different values for each of said plurality of records, thereby allowing access 
to said plurality of records to be selectively determined based on said calculation 
expression; and 

wherein said database program is further capable of: 

receiving a request to perform at least one operation on said 
plurality of records in said database; and 

evaluating said calculation expression for each of said plurality of 
records, wherein said evaluating comprises : (a) determining at least one 
value for said at least one field of data stored for a first record of said 
plurality of records, and (b) using said at least one value as input to said 
calculation expression to evaluate said calculation expression for said first 
record, and (c) determining a first result for said calculation expression 
based on said evaluation of said calculation expression for said first 
record, wherein said first result effectively indicates whether to grant 
access to said first record, . wherein said ovo l uation returns only ono of 
two possibl e values for oach of said plurality of records, on e of - sa i d 
possib le values ind i cating that said at least ono op e ration should bo 
grant e d and another ono of said possible valu e s indicat i ng that said at 
l e ast one o p eration shou l d bo - don i e dr 

granting said at loaot ono operat i on to bo perform e d wh e n - said 
evaluation r e turns - one sa i d pocoiblo valuo to indicat e- that said at l e ast ono 
operation should bo granted; and 

donying - said at loast on e op e ration to b e- p e rformed wh e n - sa i d 
eva l uat i on returns ono caid another possihlovalu e to indicate - that said at 
least ono op e r a tion should b e denied. 

44. (Canceled) 

45. (Previously Presented) A database as recited in claim 43, wherein said at 
least one operation can be a browse, an edit, or a delete operation. 
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46. (Previously Presented) A database as recited in claim 43, wherein said 
calculation expression is not explicitly defined for said at least one operation but 
said calculation expression is one that has been defined for another operation 
which has been considered as a related operation to said at least one operation. 

47. (Previously Presented) A database as recited in claim 43, wherein said 
calculation expression can be evaluated at least partly based on at least one 
state variable of said database. 

48-50 (Canceled) 

51 . (New) A method as recited in claim 1 , wherein sard evaluation can return 
at least two possible values for each of said plurality of records, one of said 
possible values indicating that said at least one operation should be granted and 
another one of said possible values indicating that said at least one operation 
should be denied. 

52. (New) A method as recited in claim 51, wherein said method further 
comprises: 

granting said at least one operation to be performed when said evaluation 
returns one said possible value to indicate that said at least one operation should 
be granted; and 

denying said at least one operation to be performed when said evaluation 
returns said another possible value to indicate that said at least one operation 
should be denied. 

53. (New) A method for selectively controlling access to individual records 
stored in a database, said method comprising: 

defining an expression that can be evaluated for each of a plurality of 
records stored in a database, wherein said plurality of records of said database 
includes a first record and a second record; 

evaluating said expression for said first record of said plurality of records 
of said database; and 

CLARP0277P2616 Page 7 of 14 US Serial No.: 09/771,143 



PAGE 8/16 * RCVD AT 3/9/2006 5:39:41 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/22 * DNIS:2738300 * CS1D:16509618301 * DURATION (mm-ss):06-56 



MAR. 9.2006 2:46PM 1 6509618301 



NO. 786 P. 9 



determining, based on said evaluating of said calculation expression for 
said first record, whether to grant access to said first record of said plurality of 
records of said database. 

54. (New) A method as recited in claim 53, 

wherein said expression is defined based on at least one field of data 
stored for said first and second record, and 

wherein said evaluating of said expression for said first record comprises: 
retrieving a first value stored in said first record for said at least one 

field; 

evaluating said expression for said first record based on said first 
value provided as input to said expression; and 

determining a first result based on said evaluating of said 
expression for said first record, wherein said first result effectively 
indicates whether to grant access to said first record. 

55. (New) A method as recited in claim 54, wherein said method further 
comprises: 

evaluating said expression for said second record of said plurality of 
records of said database; and 

determining, based on said evaluating of said calculation expression for 
said second record, whether to grant access to said second record of said 
plurality of records of said database. 

56. (New) A method as recited in claim 55, wherein said determining of 
whether to grant access to said first record determines to grant access to said 
first record, but said determining of whether to grant access to said second 
record determines not to grant access to said second record. 

57. (New) A method as recited in claim 51, wherein said expression is defined 
based on data stored in said database. 

58. (New) A method as recited in claim 51 f wherein said expression is defined 
based on one or more of the following: 
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a field of data stored in said database; 
a state variable of sard database; and 
data stored or referenced by said database. 
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